Feluda

Feluda Plugin

Detect license usage restrictions in your project. Written in Rust.

Commands

License Scanning

• feluda scan licenses — Analyze project dependencies and their licenses

SBOM Generation

• feluda sbom generate — Generate Software Bill of Materials (SBOM)
• feluda sbom validate — Validate SBOM files

Compliance Files

• feluda generate compliance — Generate NOTICE and THIRD_PARTY_LICENSES files

Cache Management

• feluda cache manage — View or clear cache

Usage Examples

Basic license scan:

feluda
feluda --path ./myproject
feluda --language rust

Output formats:

feluda --json
feluda --yaml
feluda --gist
feluda --verbose

Filter by OSI status:

feluda --osi approved
feluda --osi not-approved
feluda --osi unknown

Check license compatibility:

feluda --project-license MIT
feluda --incompatible
feluda --fail-on-incompatible

Generate SBOM:

feluda sbom
feluda sbom spdx --output sbom.json
feluda sbom cyclonedx --output sbom.json

Validate SBOM:

feluda sbom validate sbom.json
feluda sbom validate sbom.json --json --output report.json

Generate compliance files:

feluda generate
feluda generate --language rust --project-license MIT

Installation

cargo install feluda

Or via package manager:

brew install feluda        # macOS
apt install feluda         # Debian/Ubuntu
paru -S feluda            # Arch Linux

Key Features

• License analysis for multiple languages (Rust, Node, Go, Python, C/C++, R)
• Flags restrictive licenses (GPL, AGPL, LGPL, etc.)
• Checks license compatibility with project license
• Generates SBOM in SPDX and CycloneDX formats
• Validates SBOM files
• Creates compliance files (NOTICE, THIRD_PARTY_LICENSES)
• CI/CD integration with GitHub Actions and Jenkins support
• TUI mode for visual browsing
• GitHub API rate limit handling with token support